polyphony-ledger/docker-compose.tunnel.yml at main · WeAreTheArtMakers/polyphony-ledger · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
services:
  redpanda:
    ports:
      - '127.0.0.1:9092:9092'
      - '127.0.0.1:19092:19092'
      - '127.0.0.1:8081:8081'
      - '127.0.0.1:9644:9644'

  redpanda-console:
    ports:
      - '127.0.0.1:8080:8080'

  postgres:
    ports:
      - '127.0.0.1:5432:5432'

  clickhouse:
    ports:
      - '127.0.0.1:8123:8123'
      - '127.0.0.1:9000:9000'

  jaeger:
    ports:
      - '127.0.0.1:16686:16686'

  otel-collector:
    ports:
      - '127.0.0.1:4317:4317'
      - '127.0.0.1:4318:4318'

  backend:
    environment:
      CORS_ORIGINS: http://localhost:3000,https://${APP_DOMAIN}
      AUTH_MODE: ${AUTH_MODE}
      OIDC_ISSUER_URL: ${OIDC_ISSUER_URL}
      OIDC_AUDIENCE: ${OIDC_AUDIENCE}
      OIDC_JWKS_URL: ${OIDC_JWKS_URL}
      OIDC_ROLE_CLAIM: ${OIDC_ROLE_CLAIM}
      OIDC_WORKSPACE_CLAIM: ${OIDC_WORKSPACE_CLAIM}
      OIDC_SUBJECT_CLAIM: ${OIDC_SUBJECT_CLAIM}
      OIDC_ALGORITHMS: ${OIDC_ALGORITHMS}
    ports:
      - '127.0.0.1:8000:8000'

  frontend:
    environment:
      NEXT_PUBLIC_API_BASE: https://${API_DOMAIN}
      NEXT_PUBLIC_WS_URL: wss://${API_DOMAIN}/ws/stream
      NEXT_PUBLIC_JAEGER_URL: https://${TRACE_DOMAIN}
      NEXT_PUBLIC_HOME_ROUTE: /sales
    ports:
      - '127.0.0.1:3000:3000'

  prometheus:
    ports:
      - '127.0.0.1:9090:9090'

  grafana:
    environment:
      GF_SECURITY_ADMIN_USER: ${GRAFANA_ADMIN_USER}
      GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD}
    ports:
      - '127.0.0.1:3001:3000'

  cloudflared:
    image: cloudflare/cloudflared:latest
    depends_on:
      - frontend
      - backend
      - grafana
      - jaeger
    command:
      - tunnel
      - --no-autoupdate
      - run
      - --token
      - ${CLOUDFLARE_TUNNEL_TOKEN}
    restart: unless-stopped